Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer
File: MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer (raw, json)
Hash identifier: ELG5ztblvEZyuQESd6az6SGueM51X4BUdU6FRUi1760=
Subject key identifier: 32:20:56:FD:08:0C:9C:DA:CB:18:A9:C4:27:EB:01:03:3B:2D:08:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49313D34B71AFE04C2B4A54C1F1879A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft
caRepository: rsync://0.sb/repo/sb/22/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210434
IP: 31.24.86.0/24
IP: 2a12:4e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:13:d3:4b:71:af:e0:4c:2b:4a:54:c1:f1:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=322056fd080c9cdacb18a9c427eb01033b2d0854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:1d:b0:11:b7:e7:7f:f9:99:6c:51:5e:a4:
aa:e1:8e:e0:38:5f:7c:85:63:2c:38:9d:53:4c:fd:
f9:ad:3b:fe:5c:f0:cb:fe:cd:90:80:d9:bd:2b:90:
1a:6a:de:6b:35:0e:ff:86:e6:a5:45:5f:22:87:9c:
1e:c9:1d:12:f1:e8:2d:e8:8a:63:6c:0e:5b:93:de:
e3:a3:d2:38:4e:93:18:82:89:4c:13:20:af:7e:5e:
b3:ef:f3:3c:b1:73:ce:a5:36:67:5e:e6:4d:12:c4:
b3:9f:b2:e9:72:9f:14:bb:6d:6f:4d:dc:a4:65:28:
30:c9:96:d0:5e:1e:c2:ea:fc:7f:69:f4:94:8c:22:
b7:94:82:3f:2e:00:4b:c1:2c:0d:5d:96:3e:f0:de:
7c:c2:d7:a9:5e:e4:e5:e2:f3:fb:27:b9:ac:27:42:
b8:d7:e7:9d:80:f9:9e:0d:3f:19:6d:b1:4d:e2:f0:
ea:ff:07:04:a9:c8:c7:bb:53:6b:59:d0:f3:3d:ad:
df:c9:b5:8a:45:ec:82:41:b4:67:a5:ea:18:2f:bf:
3c:6b:37:e1:72:82:a4:9c:42:c6:c3:e9:da:da:20:
10:41:92:92:8e:33:de:c2:79:0e:ef:79:78:92:85:
7b:3f:2b:58:8f:77:93:46:5e:9e:20:14:aa:30:d0:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:56:FD:08:0C:9C:DA:CB:18:A9:C4:27:EB:01:03:3B:2D:08:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/22/
RPKI Manifest - URI:rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.86.0/24
IPv6:
2a12:4e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210434
Signature Algorithm: sha256WithRSAEncryption
49:3a:00:a9:63:dd:20:3a:33:cd:ef:9e:0d:ef:93:8d:ec:e8:
fd:0e:12:dc:b4:e0:ca:68:9c:73:6c:2a:90:d2:e5:0c:01:e1:
16:1a:0f:1d:84:8f:52:04:e3:de:db:25:68:2b:94:26:c5:96:
04:fe:54:93:5f:ee:19:6c:ac:a6:d3:7e:27:95:ce:7b:d7:60:
67:7d:90:88:7c:bd:76:71:9d:bf:42:bc:5a:b7:23:81:25:28:
c7:54:fb:57:da:da:35:69:84:4e:c3:11:c8:d3:02:fd:ca:98:
49:ad:bf:b7:75:ac:51:cf:cf:2a:3d:ef:b0:d0:24:a2:45:41:
05:28:6a:56:9f:a0:a5:a5:15:a5:f5:71:8a:58:1b:ef:0d:1b:
03:bd:90:87:76:3b:d0:93:42:91:0f:b0:81:bc:f8:92:15:8e:
d2:5b:53:ec:c0:2e:b6:c6:6f:44:b6:df:30:72:51:83:49:cd:
50:94:d8:94:33:66:11:21:02:7b:fe:e7:99:db:b7:7a:c8:9b:
ce:d4:25:1d:6f:f6:9a:41:ef:4a:38:f9:3e:f1:0c:fa:2f:20:
0b:e0:13:5c:35:95:f7:05:8c:2e:15:da:ec:67:67:0d:6b:07:
ad:16:7f:cb:ac:cc:8d:b7:cc:0d:8a:8a:dd:1e:f4:df:6c:a4:
cc:82:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:42:11 2024 by rpki-client on console-ams.rpki-client.org